Configuring Ntp Authentication - Cisco Catalyst 9500 Manual

Administering the Device

Configuring NTP Authentication

To configure NTP authentication, perform this procedure:
Procedure
Step 1
Step 2
Step 3
Step 4
Command or Action
enable
Example:
Device> enable
configure terminal
Example:
Device# configure terminal
[no] ntp authenticate
Example:
Device(config)# ntp authenticate
[no] ntp authentication-key number {md5 |
cmac-aes-128 | hmac-sha1 | hmac-sha2-256}
value
Example:
Device(config)# ntp authentication-key
42 md5 aNiceKey
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
Configuring NTP Authentication
Purpose
Enables privileged EXEC mode.
Enter your password if prompted.
Enters global configuration mode.
Enables NTP authentication.
Use the no form of this command to disable
NTP authentication
Defines the authentication keys.
• Each key has a key number, a type, and a
value.
• Keys can be one of the following types:
• md5: Authentication using the MD5
algorithm.
• cmac-aes-128: Authentication using
Cipher-based message authentication
codes (CMAC) with the AES-128
algorithm. The digest length is 128
bits and the key length is 16 or 32
bytes.
• hmac-sha1: Authentication using
Hash-based Message Authentication
Code (HMAC) using the SHA1 hash
function. The digest length is 128 bits
and the key length is 1 to 32 bytes.
• hmac-sha2-256: Authentication using
HMAC using the SHA2 hash
function. The digest length is 256 bits
and the key length is 1 to 32 bytes
15